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HOW IMPORTANT IS YOUR DATA? 


Years of family photos. Your entire music 
and movie collection. Office documents 
you've put hours of work into. Backups for 
every computer you own. We ask again, how 
important is your data? 


NOW IMAGINE LOSING IT ALL 


Losing one bit - that’s all it takes. One single bit, and 
your file is gone. 


The worst part? You won't know until you 
absolutely need that file again. Example of one-bit corruption 


THE SOLUTION 


The FreeNAS Mini has emerged as the clear choice to The Mini boasts these state-of-the- 
Save your digital life. No other NAS in its class offers art features: 
ECC (error correcting code) memory and ZFS bitrot 
protection to ensure data always reaches disk ee CONS ete MILEY AtOUN PEOGESS0! 
. . . ¢ Up to 16TB of storage capacity 
without corruption and never degrades over time. s T6Gbiof ECC menion withesplionteupaiade 
to 32GB) 
No other NAS combines the inherent data integrity - 2x 1 Gigabit network controllers 
; . . - Remot t port (IPMI 
and security of the ZFS filesystem with fast on-disk sisal calla cee 
. . ¢ Tool-less design; hot swappable drive trays 
encryption. No other NAS provides comparable power » FreeNAS installed and configured 


and flexibility. The FreeNAS Mini is, hands-down, the 
best home and small office storage appliance you can 
buy on the market. When it comes to saving your 
important data, there simply is no other solution. 
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FREENAS 


CERTIFIED 
STORAGE 


With over six million downloads, 
FreeNAS is undisputedly the most 
popular storage operating system 
In the world. 


Sure, you could build your own FreeNAS system: 
research every hardware option, order all the 

parts, wait for everything to ship and arrive, vent at 
customer service because it hasnt, and finally build it 
yourself while hoping everything fits - only to install 
the software and discover that the system you spent 
days agonizing over isn’t even compatible. Or... 


MAKE IT EASY ON YOURSELF 


As the sponsors and lead developers of the FreeNAS 
project, iXsystems has combined over 20 years of 
hardware experience with our FreeNAS expertise to 
bring you FreeNAS Certified Storage. We make it 
easy to enjoy all the benefits of FreeNAS without 
the headache of building, setting up, configuring, 
and supporting it yourself. As one of the leaders in 
the storage industry, you know that you're getting the 
best combination of hardware designed for optimal 
performance with FreeNAS. 


Every FreeNAS server we ship is... 


» Custom built and optimized for your use case 

» Installed, configured, tested, and guaranteed to work out 
of the box 

» Supported by the Silicon Valley team that designed and 
built it 

» Backed by a 3 years parts and labor limited warranty 


http://www.iXsystems.com/storage/freenas-certified-storage/ 


Msystems 


As one of the leaders in the storage industry, you 
know that you're getting the best combination 

of hardware designed for optimal performance 

with FreeNAS. Contact us today for a FREE Risk 
Elimination Consultation with one of our FreeNAS 
experts. Remember, every purchase directly supports 
the FreeNAS project so we can continue adding 
features and improvements to the software for years 
to come. And really - why would you buy a FreeNAS 
server from anyone else? 
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FreeNAS 1U 

- Intel® Xeon® Processor E3-1200v2 Family 

- Up to 16TB of storage capacity 

¢ 16GB ECC memory (upgradable to 32GB) 

¢ 2x 10/100/1000 Gigabit Ethernet controllers 
« Redundant power supply 


FreeNAS 2U 


¢ 2x Intel® Xeon® Processors E5-2600v2 Family 


« Up to 48TB of storage capacity 

¢ 32GB ECC memory (upgradable to 128GB) 

¢ 4x 1GbE Network interface (Onboard) - 
(Upgradable to 2 x 10 Gigabit Interface) 

« Redundant Power Supply 
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MAGAZINE 


EDITOR'S WORD 


Dear Readers, 


| repeat the same task every month where | get the chance to craft the editor’s words. It is quite interesting 
when choosing whether to start with “I hope you are well” or different way, and what to write thereafter. But to 
me, the most important thing is what you will find in the monthly BSD magazine issues, and if the featured 
articles will encourage you to start new projects and aid you in choosing your OS or programming direction. | 
hope that you will not only enjoy reading this month’s issue but also acquire additional knowledge and learn 
new skills. 


In this month’s issue, you will see the next article on FreeBSD Port-Knocking written by Abdorrahman Homaei. 
This is a decently written, technical article. It clearly explains how to set up port knocking. Abdorrahman 
Homaei is our regular reviewer and he has been working as a software developer since 2000. He has used 
FreeBSD for more than ten years. Moreover, he became involved with the meetBSD dot ir and performed 
serious training on FreeBSD. He started his company in Feb 2017. | have scheduled an interview with him. 
Therefore, if you have any questions, feel free to contact me. 


For Rafael Santiago de Souza Netto’s fans, | have an additional article written by him. This time, Rafael will 
introduce you to using LIBC in IA-32 Assembly code. The C calling convention will be discussed, equipping 
you, the reader, with the necessary knowledge to interface C code into your Assembly programs. This article is 
really technical, but relatively easy to read. It offers the best explanation on how to write and compile software. 
As always, Rafael provides great and very well written piece of work. | hope that he will write more insightful 
articles for us. Any suggestions are welcome. 


| would also want to recommend the next article written by Carlos Antonio Neira Bustos. He will teach you more 
about SmartOS. Carlos Antonio Neira Bustos has worked for several years as a C/C++ developer and kernel 
porting and debugging enterprise legacy applications. He is currently employed as a C developer under Z/OS. 
There, he debugs and troubleshoots legacy applications for a global financial company. Also, he is engaged in 
independent research on affective computing. 


To this moment, | am proud to announce that he has written many articles for the BSD magazine, and his works 
reflects how professional he is. They are always good; highly technical, well written and neat, and most 
importantly, very helpful. 


Trust me, one is never enough! | am certain that after reading the well-written article on Design and Analysis of 
Object-Oriented Feedback Process Scheduler in User Level written by Alexandre Beletti Ferreira and Victor 


Hugo Panisa Bezerra. It is a relevant paper. The purpose of this article is to present an object-oriented design 
for a feedback process scheduler that runs on user mode. 


As is the norm in every BSD issue, an interview could not be missed. This month, | would like to introduce two 
amazing and interesting people: Steve Wong and Joshua D. Drake. Steve Wong is the Director of Storage 
Product Management at iXsystems, and a Product Manager for the TrueNAS, FreeNAS Mini, and the FreeNAS 
Certified product lines. Joshua D. Drake is the Founder of Command Prompt, Inc. and United States 
PostgreSQL. 


And, do not miss Rob’s Column. It is a critical column which holds a must-read position in the BSD magazine. 


Lastly, | would like to express my sincere appreciation to the BSD team members for reviewing and 
proofreading, and iXsystems for their constant Support and time to make this edition a success. 


And now, let’s read the articles. 


Enjoy! 
Ewa & The BSD Team 
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IN BRIEF 


In Brief 08 
Ewa & The BSD Team 

This column presents the latest news coverage of breaking news, events, product releases, and trending topics 
from the BSD sector. 


SMARTOS 


Application Observability on SmartOS Using Dtrace Quickstart 12 
Carlos Antonio Neira Bustos 

In this article, Carlos takes a look at DTrace and what cool things it could do for you. The first requirement is an 
application to instrument. He chose a fairly-Known application called Minecraft. In his article, you will use 
DTrace to see what we could observe. But you want to deal with the details on how to create your own scripts 
and thus, how to create DIrace scripts. 


PROGRAMMING 


Taking Advantage of LIBC to Write Portable Assembly Programs 18 
Rafael Santiago de Souza Netto 

This article will introduce you to using LIBC in IA-32 Assembly code. The C calling convention will be 
discussed, equipping you, the reader, with the necessary knowledge to interface C code into your Assembly 
programs. In this article, a sample will be used in a Conway’s Game of Life, fully written in I[A-32 Assembly. The 
discussed code works in 


FreeBSD, NetBSD, OpenBSD, MINIX, Linux, Solaris and also Windows. The text assumes that the readers 
have, at least, a basic knowledge of Assembly programming. 


SECURITY 


FreeBSD Port-Knocking 30 
Abdorrahman Homaei 

Port-knocking is not only about opening a port or something like that. You can do whatever you want like 
executing a special script or something like reverse shell or, etc. This article will show you how to install a 
Port-Knocking Client/Server, how to configure Port-Knocking Server, and lastly, how to create Reverse-Shell. 


MINIX 


Design and Analysis of Object-Oriented Feedback Process Scheduler in User Level 34 
Alexandre Beletti Ferreira and Victor Hugo Panisa Bezerra 

some operating systems need modularity between their components as one of the main factors to implement a 
microkernel that is both secure and fault tolerant. When we consider dealing with operating system structures 
as objects, we see that it greatly helps to implement the desired modularity in these systems. 

The purpose of this article is to present an object-oriented design for a feedback process scheduler that runs 
on user mode. The authors show the details of the original structured implementation, the new pro-posed 
design, and show the adopted mechanism to interface the new scheduler and the other servers or even the 
Kernel. 


INTERVIEW 


Interview with Joshua D. Drake Ad 
Ewa & The BSD Team 

Joshua D. Drake is the Founder of Command Prompt, Inc. and United States PostgreSQL. Additionally, he is a 
former Director of Software in the Public Interest, and the current Director of The Postgres Foundation. He has 
been doing this Open-Source thing since Linux SLS. He is an avid outdoorsman, family man, and a Linux and 
Postgres lover. 


Interview with Steve Wong 46 
Ewa & The BSD Team 

Steve Wong is the Director of Storage Product Management at iXsystems, and he served in this role since 
December 2016. He sometimes gets asked what exactly a product manager does, and depending on who you 
ask, you may get a slightly different answer. But in general, a product manager has an overall responsibility and 
accountability for a product line or product lines. In his case, the TrueNAS, FreeNAS Mini, and the FreeNAS 
Certified product lines are under his team’s responsibilities. 


COLUMN 


The social implications of technological advancement are often presented in positive terms, yet our core 
working patterns have slightly changed since the agricultural age. With the increasing expansion of 
automation, robotics and artificial intelligence into traditionally secure employment sectors, what 
changes can we expect to see in a society where employment opportunities for the unskilled, 
semi-skilled and the professional rapidly shrink? 50 
Rob Somerville 


MINIXCon 2017 Announcement 


After the successful MINIXCon 2016 in Amsterdam, the MINIXCon steering committee has decided to hold MINIXCon 2017 in Munich, 
Germany, on Sept. 18, 2017. The Chair of Operating System (Prof. Dr. Wwe Baumgarten) will be our patron from the Technical University 
Munich. The idea is to exchange ideas and experiences among MINIX 3 developers and users as well as discussing possible paths 
forward. Future developments will now be done like in any other volunteer-based open-source project. Increasing community involvement 
is a key issue here. We also will make a special effort to get industry involved. 


The videos of the MINIXCon 2016 talks can be found here . 


Date, Time, and Location 
Monday, 18 September 2017 from 09:00 to 18:00 at the Theresianum, Technical University of Munich. 
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Giving a Talk 


The call for presentations is now open. To propose a talk, please see the Call for Proposals page: 


www.minix3.org/conference/201 7/cfp.html 


Registration 


To attend the conference, you need to register here. The early registration fee is 50 euro (20 euro for students) for registrations before 4 
Sept. 2017. After that, it is 75 euro for regular and 30 euro for students. This includes morning and afternoon coffee breaks, and lunch. The 


lunch will include a vegetarian option. 


Transportation 


You can fly to Munich Airport almost anywhere in the world. However, if you are coming from somewhere in Europe within 400 km of 
Munich, the train is probably faster and more convenient. 


Hotels 
Munich has over 400 hotels in a wide variety of price classes. Tripadvisor.com has ratings of almost 400 of them. 


Dont be afraid about the prices of the hotels. The Bavarian Beerfast starts on Saturday before the MinixCon2017. The hotel that is 
physically closest to the campus is Hotel Konigswache. You can get more affordable hotels reachable by subway (Stop Theresienstrasse, 
NO, not Theresienwiese!) If you plan to do some sightseeing in Munich before or after the conference, the Pinakotheken are reachable on 
foot and of course the Oktoberfest Another attraction are the Eisbach Surfers. 


Munich Tourism 


While MINIXCon 2017 is undoubtedly the biggest attraction in town, Munich has hundreds of things to do and places to see. Tripadvisor 
has a long list of Here are a few of the better-known ones. 


Marienplatz BMW museum ‘Town hall Deutsches museum Surfing the Eisbach wave 


Questions 


If you have questions about anything, please mail them to conference@minix3.org 


iXsystems’ TrueNAS 
Delivers Object Storage 
Features and 
Performance 
Improvements 


New TrueNAS 11.0 Release improves storage 
performance by up to 25%, decreases latency by up 
to 45%, and enables customers to deploy a private 
or hybrid storage solution. 

iXsystems, the enterprise storage vendor renowned 
for its open-source software contributions, today 
announces Version 11.0 of the TrueNAS enterprise 
storage array operating system. 


TrueNAS 11.0 represents the latest generation of 
TrueNAS software for the award-winning line of 
enterprise storage arrays, and is available to all new 
and existing TrueNAS customers. TrueNAS 11.0 
introduces support for the object-based Amazon 
simple storage service (S3) API. Customers can now 
test, develop, and deploy applications on TrueNAS 
as part of a private or hybrid cloud, avoiding the 
pitfalls of public clouds. 


Combined with VMware, Citrix, and Veeam 
certifications, the TrueNAS Z product line makes a 
great datastore for ESXi VMs, XenServer VMs, and 
Veeam backup images. TrueNAS users will benefit 
from the overall systematic, architectural, and 
performance improvements in TrueNAS 11.0. Testing 
indicates that certain storage operations, such as 
serving up files, operate up to 25% faster with an up 
to 45% reduction of latency than the same storage 
operations using TrueNAS 9.10. 


IN BRIEF 


Product Highlights 


« Unified: Simultaneous file, block, and object 
protocols to support multiple applications. 


- Reliable: Uses the OpenZFS file system, which 
ensures data integrity with best-in-class 
replication, snapshotting, and protection against 
data corruption and decay. 


¢ Safe: High Availability option for continuous data 
availability. You can replicate data remotely or 
locally to any product in the iXsystems storage 
lineup. 


- Trusted: Built on iXsystems FreeNAS, the world’s 
#1 software-defined storage solution with over 9 
million downloads. 


¢ Solid: Award-winning 24/7 white-glove support 
and enterprise-class features such as 
compression, deduplication, and thin-provisioning. 


- Consistent: Provision and manage S3-compatible 
object storage using extensions to the GUI 
interface found in TrueNAS 9.10. 


- Protects VMs: TrueNAS is certified by Citrix, 
VMware, and Veeam, helping to accelerate the ROI 
when deploying it in Support of virtualization or 
backup/archive solutions. 


In addition to adding S3 compatibility and 
performance gains for file and block protocols, 
TrueNAS 11 introduces new alerting capabilities with 
support for AWS-SNS, Hipchat, InfluxDB, Slack, 
MatterMost, OpsGenie, PagerDuty, and VictorOps. 
This new feature is just one of the many 
improvements to the TrueNAS architecture that 
make TrueNAS the ideal compute and storage 
appliance for mission-critical business usage. 
iXsystems also announces the general availability of 


the TrueNAS X10, an entry level enterprise-class 
storage solution that is ideal for mission-critical 
workloads such as file sharing, backups, and 
replication. 


The TrueNAS X10 was announced on June 6, 2017, 
and has seen strong demand due to its low entry 
price, offering 201B of enterprise-grade storage for 
under $10,000 and providing scalability to 360TB. 
The TrueNAS X10 ships with TrueNAS 11.0, allowing 
SMBs and others to use the TrueNAS X10 to share 
Amazon S3-compatible storage. 


TrueNAS 11.0 also runs on the TrueNAS X10, 220, 
Z30, Z35, and the Z50 TrueFlash. TrueNAS updates 
are available through the software updater, a 
component of the user interface. 


TrueNAS customers will be alerted of the availability 
of the TrueNAS 11.0-U2 update and should contact 
iXsystems Technical Support if they have any 
questions. 


To learn more about the TrueNAS 11.0 release, send 
an email to info@iXsystems.com, call 
1-855-GREP-4-IX, or visit 
www.ixXsystems.com/TrueNAS. 


Source: 
httos://www.ixsystems.com/blog/truenas-v1 1/ 


Stormshield and FreeBSD 


Stormshield has been using FreeBSD, an advanced 
open-source operating system, since 1998 along 
with many others including Apple, Juniper, Cisco 
and Dell. This collaborative approach is important to 
Stormshield, which demonstrates its commitment by 
providing financial support to the FreeBSD 
foundation. 


“In 1998, we chose the FreeBSD community to help 
us breathe life into our vision of network security. 
Today, we are in a position to help this community 
realize its own vision,” Fabien Thomas, Stormshield’s 
Chief Innovation Officer, said last December. 
Stormshield’s financial contribution helps the 


platform with its develooment and the recruitment of 
new developers. 


Source: 


httos://www.stormshield.com/stormshield-freebsd-re 
newal-silver-soonsorship/ 


EuroBSDcon 2017 


EuroBSDcon is the premier European conference on 
the open-source BSD operating systems attracting 
about 250 highly skilled engineering professionals, 
software developers, computer science students 
and professors, and users from all over Europe and 
other parts of the world. The goal of EuroBSDcon is 
to exchange knowledge about the BSD operating 
systems, facilitate coordination and cooperation 
among users and developers. 


The conference will be held at the Espace Saint 
Martin in Paris the 21-24 September 2017. 


Source: https://2017.eurobsdcon.org/ 


QtWebEngine Landed 


August 18th, 2017: The long-awaited QtWebEngine 
-- the Qt port of the Blink engine that also powers 
the Chromium browser -- has landed in the official 
ports tree. This completes the portfolio of Qt5 
modules on FreeBSD, and paves the way for 
browser- and application updates that depend ona 
reasonably-modern web-rendering engine. 


Source: 


httos://freebsd.kde.org/news. ohp#itemQtWebEngine 
Landed 


OPNsense 17.7 Released 


The final release of version 17.7 “Free Fox” includes 
highlights such as SafeStack application hardening, 
the Realtek re(4) driver for better network stability, a 
Quagga plugin with broad routing protocol support 


and the Unbound resolver as the new default. 
Additionally, translations for Czech, Chinese, 
Japanese, Portuguese and German have been 
completed for the first time during this development 
cycle. 


The focus in OPNsense has shifted to improving and 
streamlining its various systems and providing 
continuous updates, which amounts to over 300 
individual changes made since 17.1 so far. The 
plugin infrastructure is growing as well thanks to our 
awesome contributors Frank Wall, Frank Brendel, 
Fabian Franz and Michael Muenz. And we, last but 
not least, have been working more closely than ever 
with HardenedBSD by unifying our ports 
infrastructure. 


Source: 
httos://opnsense.org/opnsense- 1 /-/-released/ 


The NOVA Filesystem 


NOVA is intended to be such a filesystem. It is not 
just unsuited for regular block devices, it cannot use 
them at all since it does not use the kernel’s block 
layer. Instead, it works directly with storage mapped 
into the kernel's address space. A filesystem 
implementation gives up a lot if it avoids the block 
layer: request coalescing, queue management, 
prioritization of requests, and more. On the other 
hand, it saves the overhead imposed by the block 
layer and, when it comes to nonvolatile memory 
performance, cutting down on CPU overhead is a 
key part of performing well. 


Source: httos://Iwn.net/Articles/729812/ 


HAMMER2: Inital 
Release, Next Release 


There will be a bootable, single-image version of 
HAMMER2 in the next DragonFly release. Matthew 


Dillon has a note about what will be in place at that 
point, and you can always look at the recent 
commits. 


Source: 


httos://www.dragonftlydigest.com/201 7/08/21/2012/7. 
html 


DragonFlyBSD 4.8.1 
Released 


DragonFly version 4.8 brings EFI boot support in the 
installer, further soeed improvements in the kernel, a 
new NVMe driver, anew eMMC driver, and Intel 
video driver updates. 


The details of all commits between the 4.6 and 4.8 
branches are available in the associated commit 
messages for 4.8RC, 4.8.0, and 4.8.1. 


Changes 


¢ Support for eMMC booting, and mobile and 
high-performance PCle SSDs 


« EFI support 

« Improved graphics support 

¢ Improved kernel performance 
Other user-affecting changes 

« Kernel is now built using -O2. 


« VKernels now use COW, so multiple vkernels can 
share one disk image. 


¢ powerd() is now sensitive to time and temperature 
changes. 


¢« Non-boot-filesystem kernel modules can be 
loaded in rc.conft instead of loader.conf. 


Source: httos://www.dragonflybsd.org/release48/ 
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Download syslog-ng Premium Edition 
product evaluation here 


Attend to a free logging tech webinar here 


BalaBit 


IT Security 


www.balabit.com 


syslog-ng log server 


The world's first High-Speed Reliable Logging™ technology 


HIGH-SPEED RELIABLE LOGGING 


m above 500 000 messages per second 


= zero message loss due to the 
Reliable Log Transfer Protocol™ 


= trusted log transfer and storage 


The High-Speed Reli 


SMARTOS 


Application Observability 


on SmartOS 


Using Dtrace Quickstart 


For those who don’t know it, DIrace, or Dynamic 
Tracing, is a powerful diagnostic tool introduced in 
the Solaris 10 OS. 


DTrace 


Since its inception, it has been implemented in other 
operating systems, the most noteworthy being 
FreeBSD and Mac OS X. | remember checking out 
sun Microsystem web page and read about DTrace. 
lt seemed a tool that could solve to pinpoint a lot of 
issues, and in fact in expert hands it could. 
Additionally, it was a key tool that helped porting of 
KVM to illumos done by the SmartOS team at Joyent 
http://dtrace.org/blogs/rm/201 1/08/1 6/visualizing-kv 
m/. 


The first time | used it was around in 2008. | ran a 
Neverwinter Nights 
(http://neverwinternights.info/dedicatedserver.htm) 
persistent world. | used Solaris 10 with ZFS and 
BrandZ zone that ran Centos at that time. Using 
DTrace, | discovered several issues with the scripts 
that we created for our persistent world. We found 
out that there were several scripts calculating time, 
and that took a toll on the server. Our server was a 


12 


mighty Dual-Pentium 3 with 512 MB of RAM, and it 
worked great. 


In this article, we will take a look at DIrace and what 
cool things it could do for you. 


First, we will need an application to instrument. | 
have chosen a fairly Known application called 
Minecraft. 


We will use DIrace to see what we could observe. 
However, we will not deal with the details on how to 
create our own scripts. For details on how to create 
DTrace scripts, here is a DIrace guide: 
http://dtrace.org/guide/preface.html. 


Therefore, the aim of this article is to show you how 
great DTrace is and what you could do to exploit its 
magnificent features. 


What things do we need? 


A SmartOS SmartMachine (it’s a native zone). 


Download Minecraft Server Latest version 
https://mcversions.net/ 


Download the Solaris x64 version of the JDK 


http://www.oracle.com/technetwork/java/javase/dow 
nloads/jdk8-downloads-2133151.html 


The DTrace toolkit 
https://github.com/opendtrace/toolkit 


You can download SmartOS from 
https://wiki.smartos.org/display/DOC/Download+Sm 
artOS_ There is a vmware version to spin a vm, or 
you could also provision a smartmachine at Joyent 
at: 
https://docs.joyent.com/public-cloud/getting-started 


lf you are using a vm, you need to take a look at this 
documentation 


httos://wiki.smartos.org/display/DOC/How-+to+creat 


e+a+Virtual+Machine+in+Smart0OS 


that explains how to create a SmartOS zone. If this is 
too long for you to read, just use this machine 
description json file. 


[root@krondor /opt/payloads]# cat 


Ssmartos.json 


Vitam e “TOVveie , 


PiMeage- add: 
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Figure 1. vmadm list 
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Modify your network accordingly, then to provision 
the zone, just use the vmadm tool 


https://smartos.org/man/1m/vmadm 


S vmadm -f create smartos.json 


That’s it! Now to check what zones you are currently 
running, just type: 


S vinedm. 143 


After executing vmadm, you should see a UUID 
returned. We will use it to login into the zone using 


Zlogin command. https://illumos.org/man/1/zlogin 


AL TAS 

moiap 

eopT backports 
Jountu- 14.04 
Redhat-7.3 

bua ld-alpine-aso 
mnis69 centos7 
Freenpscll 

pkgs re 


Minec rattoo 


ocrattSmartos 
dsmart-bua lds 


Finally, let’s login into our newly created zone, in my 
case: 


S$ zlogin 
£7c10197-£810-c05a-89c8-£53f421ab4b1 


Create the user which will be used to run the 
minecraft server. In my case, the user is mcserver. 
Check the useradd manpage to create it, then, 
execute the following: 


meserverdminecrarlo0:.S su = mMcSserver 


mcserver@minecraft00:~$S wget 


https://launcher.mojang.com/mc/game/1.12.1/server 
/561c7b2d54bae80cc06b05d950633a9ac95da816/s 


erver.jar 


mcserver@minecraft00:~S screen 


Now, we could start the server, but as we are going 
to instrument the JVM, there are a couple of more 
steps we need first. We cannot start instrumenting 
using the hotspot dtrace provided (a provider gives 
us probes which enable us to instrument the calls of 
the program being DTraced). Bryan Cantrill (Joyent’s 
CTO and father of DTrace), clearly explains this: 


The problem here is that, on SmartOS (and other 
illumos variants -- as well as their proprietary Solaris 
cousins), the DTrace module in the JVM ts lazily 
loaded (that is, the DOF was compiled with -x 
lazyload). As a result, the DIrace probes are not 
loaded until they are explicitly enabled. There are two 
ways to deal with this. The first is that, you command 
DTrace to enable the specific probes in question, 
forcing the target process to load its probes. This 
requires (at least) the ID of the target process. On 


root@xrondor /opt/payloads|/# zlogin T7c10197-T810-c05a-89c8- 
. 


illumos variants (SGmartOS, OmniOS, etc.), you can 
effectively undo the lazy loading of the DIrace 
probes (and stack helper) by using an audit library 
designed for the task. This library -- 
/usr/lib/dtrace/libdtrace_forceload.so and its 64-bit 
variant, /usr/lib/dtrace/64/libdtrace_forceload.so -- 
will effectively force the DTrace probes to be loaded 
when the process Starts, giving you USDT probes 
and the jstack() action for all such processes. To do 
this for 32-bit JVMs, launch Java with the 

LD _AUDIT_32 environment variable set: 


export 
LD AUDIT _32=/usr/lib/dtrace/libdtrace_forceload.so 


For 64-bit JVMs: 


export 
LD AUDIT 64=/usr/lib/dtrace/64/libdtrace_forceload 
.SO 


Therefore, before running the server, we need to do 
the following: 


mcserver@minecraft00:~S export 
LD AUDIT 64=/usr/lib/dtrace/64/libdtrac 


e TOrecelOad.so 


Start the server and enable DIraceProbes 


mcserver@minecraft00:~S java -Xmx2024M 
-Xms2024M -XX:+ExtendedDTraceProbes 


=jat Minectvanl Server. Jar MOGUL 


At this moment, we could start instrumenting the 
JVM that is running Minecraft. 


Detach from screen (press Ctrl+a+d) and exit the 
mcserver login. Now as root, let’s start downloading 
the DTrace toolkit. 


53t421ab4b! 


cted to zone 'f7c10197-T810-c0Sa-89c8-T53f42lab4bl" pts/1} 


ast login: Fra Aug 25 21:51:64 on pts/3 I 


; 
. heer este ee 
‘ b 
: r | f 
. ; 


; Instance (pkgbuald 17.2.0) 


https://docs.joyent.com/images/smartos/pkgbuild 


root@minecraftoo -—]# & 


Figure 2. Create the user 


As the name implies, it has several scripts classified 


by area of interest, and in our case, we will check the 


Java folder. 


Let’s clone it from github. We will fetch the illumos 
branch. 


[root@minecraft00 ~] git clone -b 


1llumos 


https://github.com/opendtrace/toolkit 


The DTrace toolkit was created by Brendan Gregg 


and even if you are not a developer, you could 
leverage a lot using the scripts created. Let’s go to 
the Java folder of the DTrace toolkit 


For example, if you want to instrument Java object 
allocation, execute the following script j|_ objnew.d 


16910 java/util/HashMapskeylIterator 
Distribution 


32 | PABCEREEEAEEESEAREEERBEEEBEERBERRBEERBEGRE 
64 | 


16916 java/utal/ArrayListsItr 
value Dastribution 
16 | 
32 | PRARARAR EAR ARAAARAARAB AR AR AR ARAB AAA aaa 
64 | 


java object allocation count by pid and class, 


PID 06)S CLASS 
16910 1 [Leom/mojang/auth|ib/GameProfile; 
169106 1 java/util/ArrayssArraylist 
16910 1 jp 
16910 l at$a 
16910 iS ko 
16910 206 java/lang/String 
16910 206 java/lang/StringBuilder 


[root@minecraft00 ~/toolkit/Java] # 
./j_objnew.d 


This script will generate a report on the allocations 
done by the Minecraft server. For our case, it is the 
only JVM running at the moment in our machine. As 
you can see (Figure 3), the first part of the report 
shows the distribution of bytes per PID and class, 
take for example the following distribution. 


The Figure 4 shows that for the java.lang.String 
Class, it has allocated 100 objects with a requested 
size of 16 bytes. 


What about if you want to Know which methods are 
being executed at the moment? 


That’s easy, just execute | methodcalls.d script. 


16910 2609 i1t/unimi/dsi/fastutil/longs/Long20b) ec tOpenHashMap$Valuelterator 


16910 209 [Lvr; 
169106 3609 et 


16916 309 net /ainecratt/server/MinecratftServerssl_anbdas6 


16910 3609 ous? 

16910 310 java/util/ArrayList 

16910 412 IC 

16910 570 }j$a 

16910 f2l et$a 

16910 1606 java/util/HashMapsXeylterator 
169106 2576 java/util/ArrayListsitr 


[root@ainecraftee ~/toolkit/Javalé 


Figure 3. Report 


Lang /String 
Distribution count 
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rm 0 


Figure 4. java.lang.String Class 
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Figure 5. 2 calls to the method shuffle from java.util.Collections Class 


As shown on Figure 5, there are 2 calls to the 
method shuffle from java.util.Collections Class. 


(http://docs.oracle.com/javase/6/docs/api/java/util/C 
ollections.html). 


Without knowing how to use DTrace you already 
have a lot of information. That’s the power of the 
DTrace toolkit. It does all the heavy lifting for you. If 
you need more specific information, just take a look 
at the scripts and along with the DTrace guide, you 
could start tweaking and customize based on what 
you really want to instrument. 


Conclusion 


With those examples, you could realize the power of 
DTrace. Moreover, it’s really useful for performance 
analysis and just to Know what is going on at any 
instant in your application. DTrace is battle tested 
and Production safe. Therefore, you could 
instrument without fear. AS we saw in the JVM case, 
we need to enable DIraceProbes with 
-XX:+ExtendedDTraceProbes flag that will make 
things go a little slower. However, that is a small 
price to pay. DIrace can instrument other 
languages/vms like Javascript ( there are nodejs 
probes courtesy of Joyent), ruby, perl, go, C, 
C++,instrument the kernel, etc. If you learn to use 
DTrace effectively, you will suffer less headaches 
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with production issues (if you happen to run 
SmartOS or other Illumos distro). Furthermore, you 
will be able to profile your applications easier and 
faster. 


This article was to get you interested in DTrace and 
try it. If your application only runs in Linux, you could 
use an |x branded zone and still enjoy the benefits of 
DTrace, and run your Linux application on a illumos 
kernel with DTrace. 
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PROGRAMMING 


Taking Advantage of LIBC 
to Write Portable Assembly 


Programs 


This article will introduce the reader to use LIBC in 
|[A-32 Assembly code. The C calling convention will 
be discussed, giving the readers the necessary 
knowledge to interface C code into their Assembly 
programs. 


For this article, a sample will be used in a Conway’s 
Game of Life, fully written in IA-32 Assembly. The 
discussed code works in FreeBSD, NetBSD, 
OpenBSD, MINIX, Linux, Solaris and also Windows. 
The text assumes at least a basic knowledge of 
Assembly programming by the readers. 


Why Assembly is still important? 


The Assembly language is the closest you can get to 
the CPU after raw machine code. If you have 
intentions of becoming a system programmer, you 
have to dedicate some time writing code in this 
programming language. Also, if you want to dive into 
reverse engineering, exploits, compilers, operating 
systems and related subjects, understanding the 
Assembly is mandatory. 


Moreover, Assembly can teach you important things 
about how computers work, in the end, you can 
become a better programmer by pushing your limits 
with this bare-bone programming language. 
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So many types of flavors... 


Unlike other high level languages, Assembly boasts 
of tons of different flavors. In fact, it depends on the 
current CPU which you are using. The most popular 
Assembly type is the IA-32/64. 


The IA platform stands for the set of instructions 
codes designed for the Pentium processors. For 
32-bit architectures, there is [A-32 whereas for 64-bit, 
IA-64 exists. This article focuses in IA-32 instructions. 


Besides the types of sets of instructions, there are 
different types of syntaxes in this language. The two 
most popular are Intel and AT&T syntaxes. The main 
difference between the two is the order of parameters 
passed by the instructions mnemonics. The 
parameters in one syntax look inverted when 
compared with another syntax. The AT&T syntax 
tends to indicate the destination before the source. 


In open-source world, maybe the AT&T syntax is 
more popular because of this syntax being adopted 
by GCC. GNU adopts this syntax in its assembler 
called GAS, and also for the C inline Assembly. 


An assembler is the same of a compiler. It checks if 
the code makes sense and generates the suitable 
executable output from that input. 


An inline Assembly is a way of wrapping a set of 
explicit Assembly statements into another 
programming language. The C language is the most 
famous programming language which implements 
this feature. Truly, it is implemented by the compilers, 
and there is no standard about how to inline it. Inline 
Assembly puts programmers in control, allowing 
them to optimize the code by themselves. GCC 
compiler implements one of the most powerful inline 
Assembly interfaces. However, inline Assembly is out 
of the article’s scope. 


Main fallacies about Assembly 


since | started programming, | have heard several 
tales about Assembly being an impossible language. 
some perceived it as a useless language because to 
them, it was impossible to produce portable code or 
fully functional programs and so on. 


As | earlier stated, Assembly puts you in control and 
pushes you to learn more about your 
machine/environment. 


The language is far from being useless since even 
the modern high-level programming languages must 
generate Assembly stuff if an executable code is 
desired. If compilers are pretty good today on 
generating Assembly, taking final users away from 
Assembly, for sure certain skillful Assembly 
programmers are still today doing a great job behind 
the scenes for several popular compilers. A number 
of people have to do the task which others perceive 
as a dirty job. 


Currently, system programmers still must deal with 
Assembly language. 


Not always can a programmer debug a code with all 
loaded symbols. In cases like that, knowledge of 
Assembly can save you hours or even make possible 
you to identify and fix the bug by yourself. 


Another fallacy is about not being possible to 
produce something portable with this Language. In 
this case, | will guide you through some parts of a 
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simple but complete implementation of Conway’s 
Game of Life in IA-32 Assembly. This implementation 
can run in: FreeBSD, NetBSD, OpenBSD, MINIX, 
Linux, Solaris and also Windows. At the end of this 
article, | expect you to dismiss the fallacy by 
accepting that with the Assembly language, it is 
possible accomplish critical tasks. This is because 
under the hood, any compiler uses it. Doing it by 
ourselves can be tough, but tough is not impossible. 


Combining two consistent, direct and 
powerful worlds 


To reiterate my earlier statement, proficient Assembly 
programmers can improve the performance of any 
software with smart usages of the right CPU 
instructions. Because of this, C compilers have been 
offering the possibility of embed Assembly code into 
C code. 


However, after C language became so popular, the 
following observation can be made these days: if in 
the early days, inline Assembly helped programmers 
apply fine performance tunings in their C code, today, 
C language can help Assembly programmers 
produce a more portable code. 


The truth is that almost all operating systems you 
have ever used contain a standard C library 
implementation. This makes LIBC a kind of 
omnipresent piece of software. C language was 
designed to take into consideration portability, and in 
practice, it has proved to be portable. If you do not 
want too many surprises for porting software, 
prioritize the LIBC usage and you will enjoy an easier 
process. 


The C calling convention 


The C calling convention is a standard created to 
solve issues on how to pass to and return values 
from a function. When this standard has been 
adopted, it is easy to port, export and also import 
functionalities. 


This convention in |A-32 architecture states that the 
function arguments must be passed using the stack. 
In order to return the function result, the EAX register 
is used. If the function returns 64-bit values, the 


result is put into EDX:EAX. For floating point results, 
the data is put into the FPU register called ST(0Q). 


With this convention, you should be able to adopt 
prologues and epilogues when writing your functions. 
The Code Listing 1 shows a prologue and an 
epilogue being applied. By the way, the Code Listing 
1 does the same as the ENTER and LEAVE 
instructions. 


As you may know, the Assembly call instruction 
pushes to stack the instruction pointer. The prologue 
and epilogue are used to save this data to avoid any 
form of corruption since the stack will also be used to 
manipulate local variables of the function. In this 
case, when the ret instruction is applied, the CPU will 
exactly know where to return. 


When calling a function, with C calling convention, 
the function parameters must be pushed in the 
reverse order. Following this order the first accessible 
parameter onto stack will be the first parameter 
expected by the function. 


How local function data are defined 


After the function prologue is done, the register, EBP, 
will point to the top of the stack. Therefore, if you 
want to reserve space to a 32-bit value, you should 
use -4(%ebp). The minus signal is implies that the 
stack grows up from top to bottom. If a second 
variable is desired, it should start at the address 
“indexed” by -8(%ebp). 


Assembly does not use data types. The 
determination of size and nature of your data is 
always up to you. 


How to clean up the stack 


The caller should clean up the stack after function 
returns. This should be done by simply adding to the 
ESP register the number of bytes pushed into the 
stack. You should add because the stack grows 
upside down. The Code Listing 2 shows this clean up 
procedure. Using the add instruction to restore the 
stack tends to be more efficient and easier than 
saving the address after pop it or move from 
somewhere. 


The Conway’s Game of Life 


The Game of Life stands for a cellular automaton. 
Cellular automata are discrete models. They are built 
from a finite grid, each grid consists a finite number 
of states; those states vary according to deterministic 
rules. Cellular automata are studied in mathematics, 
physics, biology, computer science among other 
scientific fields. Maybe the Conway’s Game of Life is 
the most popular cellular automaton. The grids have 
only two states: alive or dead. 


The rules applied for each grid cell is: 


¢ Any live cell with fewer than two live neighbors 
dies, as if caused by under-population. 


Code Listing 1: ‘The function prologue and epilogue. 


1 func: 

2 pushl %ebp 

3 movl %esp, %ebp 
4 ae 

5 movl %ebp, %esp 
6 popl %ebp 

7 ret 


Code Listing 2: How to clean up the stack after a function call. 


1 pushl %eax 
call func 
3 addl $4, %esp 


i) 


¢ Any live cell with two or three live neighbors lives 
on to the next generation. 


¢ Any live cell with more than three live neighbors 
dies, as if by overpopulation. 


¢ Any dead cell with exactly three live neighbors 
becomes a live cell, as if by reproduction. 


Only using those simple rules, the Game of Life is 
capable of producing interesting finite and infinite 
patterns. All that a player needs to do is to define the 
initial state of the grid. 


Now, let me show you how this game was 
implemented using IA-32 Assembly and LIBC. 


A multi-platform Game of Life in 
Assembly 


Currently, the described code can run in FreeBSD, 
NetBSD, OpenBSD, MINIX, Solaris, Linux and 
Windows. In this article, | will only focus on FreeBSD, 
NetBSD, OpenBSD and MINIX aspects, besides, of 
course the platform independent code relevant for 
implementing the main game's logic. If you are 
interested, you can download the code at 
https://github.com/rafael-santiago/life and check the 
particularities for the non-discussed operating 
systems. 


All components of the game were written in a single 
source code file, called ‘life.s’. This was done to seek 


minimalism and the possibility of building it without 
any build system. 


The adopted syntax assembly is the AT&T, since it is 
the syntax adopted by GAS. By the way, the GNU 
Assembler is our assembly of choice for this ‘DIY’ 
little journey. 


The code sections 


Although it appears a simple task implemented in a 
single file having 1533 lines, this file has got sections. 
The ‘.data’ section is a place that you can use to 
declare static data. 


As you may know from assembly, everything is about 
addresses, even a variable is a chunk of memory 
having a start offset. This start offset should be 
labeled, and the data be defined as well. The 
general form of data definition in GNU Assembler is: 


SLabel-: 
<GVOe “related Gara 


For this game of life, | have implemented the option 
of defining by command line, the color of the alive 
and dead cells. In this respect, the user should pass 
the options ‘-—alive-color=<color>’ and ‘--dead- 
color=<color>’. The supported colors are black, red, 
green, yellow, blue, magenta, cyan, and white. 


In a higher level programming language, the list of 
supported colors could be defined in an array. For 


Code Listing 3: Defining the array of supported colors. 


color black: 

.asciz ” black” 
color red: 

.asciz "red” 
color green: 

.asciz "green” 
color yellow: 

.asciz " yellow” 
9 color blue: 
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10 .asciz " blue” 

11 color magenta: 

12 .asciz ” magenta” 

13 color cyan: 

14 .asciz "cyan” 

15 color white: 

16 .asciz "white” 

17 colors: 

18 .tint color” black, 

19 color blue, color magenta, 


color _red, color green, 
color cyan, 


color yellow , 
color white 


instance, we could use something like ‘char 
“suported_colors[] = {°...", “..." }y. 


The Code Listing 3 shows how the array of supported 
colors was defined. The address labeled as ‘colors’ 
stores sequentially eight addresses, being an 
indirection to them. This code is designed for IA-32. 
Therefore, the int type will express an address 
without any problem because the size of int is four 
bytes the word size in 32-bit CPUs. 


The Code Listing 4 shows how the game board (grid) 
was defined. The game board is simply a matrix NXxN. 
The GNU Assembler offers a short way of defining 
repetitive definition tasks. 


Many more variables are defined in ‘.data’ section. 
However, for brevity, they will be introduced when 
needed within the text. 


The ‘.bss’ section also defines some variables. All 
data defined in ‘.bss’ section is zeroed, and this is the 
difference which lies between the two sections. | 
defined chunks of data in *.bss’ section that | will use 
later in the program text as temporary variables. To 
mention but a few, ‘argv’ and ‘argc’ are used to 
manipulate command line arguments and so on. 


The ‘.globl’ does not stand for a section, but rather, it 
is important because it makes the symbol visible 
along the entire program. We are interfacing C code 
with assembly. In doing so, we need to declare the 
global label “_start’ because for the glibc, it is 
equivalent to the main function, the program entry 
point. 


The entry point 


The general idea of the entry point is to register the 
argc and argv data, and then try to read several 
command line options. If some error is found, we 
divert the execution flow to some error handling and 
so it exits the program. Otherwise, if all reading stuff 


Code Listing 4: Defining the game board. 


.equ CELL BYTES PER ROW, 45 
cells: 


. byte 0x00 
.endr 


was executed without any error, the game loop is 
called. 


The Code Listing 5 shows some parts of the main 
function (_ start’). The code snippet shows some 
calls to the LIBC function signal(). The intention here 
is to detect SIGTERM(15), SIGINT(2) and 
SIGQUIT(3). When one of these signals are 
detected, the program exits because the passed 
callback function, ‘$sigint_watchdog’, is called and it 
aborts the program by setting the variable quit_game 
to 1. The user can easily send a SIGINT just by 
typing CTRL+c during the game's execution. As you 
can see, the C calling convention is followed. These 
signals must be represented as specific values to be 
POSIX compliant. Therefore, there is no problem with 
using hardcoded values for them. They will never 
change in compliant UNIXes. 


The Code Listing 5 also introduces a powerful feature 
from GNU Assembler: the ‘.ifdef/.ifndef compiler 
directives. They tend to be similar to C directives but 
instead of using the ‘# symbol, you use *.’. Still in 
Code Listing 5, you may get curious to know what the 
statement ‘call *clrscr’ does. Well, the ‘clrscr’ is a 
function pointer ( when you want to call a function, 
you should call what it is pointing to). | have used this 
trick to provide a way of supporting ansi terminals in 
Windows, in case of users running it in MSYS, 
Cygwin. The way of clearing the screen is different 
with a colored output, but Windows stuff is out of 
scope here. 


The get_option function 


The get_option function introduces a string 
instruction which comes in handy when scanning 
data. The mnemonic of this instruction is ‘scansb’. 


This instruction is combined with another one called 
‘repne’. The get_option function is responsible for 
reading the user option passed as a parameter 
returning the read buffer. If the user option was not 


1 
2 
3 
4 -rept (CELL BYTES PER ROW « CELL BYTES PER ROW) 
5 
6 


passed by the user, the get_option would return a 
default value also passed as a parameter. 


The ‘scansb’ instruction scans a buffer referenced by 
the EDI register, and the most important argument: 


Code Listing 5: Defining the game board. 


1 .ifndef —WIN32 

2 .globl — start 

3 start: 

4 .else 

ts) .globl — main 

6 main: 

7 .endif 

8 

9 pushl $sigint watchdog 
10 pushl $2 

11 call signal 

12 add! $8, %esp 

13 

14 pushl $sigint watchdog 
15 pushl $3 

16 call signal 

17 addl $8, %esp 

18 

19 pushl $sigint watchdog 
20 pushl $15 

21 call signal 

22 add! $8, %esp 

23 

24 movl %ebp, %edx 

25 movl %esp, %ebp 

26 movl %ebp, %ecx 

27 addl $8, ‘%ecx 

28 pushl %ecx 

29 pushl (%ebp) 

30 call set argc argv 
31 movl %ebp, %esp 

SZ movl %edx, %ebp 

33 

34 

35 

36 pushl $1 

37 pushl $0 

38 pushl $option_ help 
39 call get option 

40 add! $12, %esp 

Al 

42 game_ start: 

43 

44 

45 # INFO( Rafael): Loading the 
46 HH 

A7 

48 call Idlstgen 
49 call xclrscr 
o0 call life 

51 

O2 call xclrscr 
53 

54 

55 

96 bye: 

57 pushl %eax 


58 call exit 


initial 
generation defined by the user. 


the desired byte to be matched against EDI content. 
This byte should be stored in AL register. 


This instruction, when combined with ‘repne’, 
provides an efficient buffer parsing operation. The 
‘repne’ instruction will repeat the passed instruction 
and increments the EDI register by one until the ECX 
register hits zero. However, the ‘repne’ instruction 
also has a logical side which inspects the zero flag 
(ZF). lf the zero flag status indicates a ‘not equal’ 
case, (repne) the repetition is aborted too. 


In case of the get_option, the ‘repne scansb’ is used 
for getting the length of the passed option that should 
be read from the command line arguments array 
referenced by ‘argv’. The ‘repne scansb’ loop ends 
when a null byte is hit. The last trick to get the size of 
the string is the execution of the instructions ‘subw 
SOxfffe, %cx’ and ‘neg %cx’. After finding a null byte, 
the ECX register will store (65535 — size in bytes of 
the passed option), the subtraction and inversion 
using ‘neg eliminates the 65535 from the equation, 
allowing only the size in byte of the passed option. In 
other words, the result will be a negative number. 
The neg will get the absolute value from it. Yes, we 
could have used ‘strlen’ instead of this tricky code. 
But after using it repeatedly, it becomes natural and 
easier. 


The instruction, ‘repe cmpsb’, is similar to the ‘repne 
scansb’. However, here, the bytes will be compared 
while they are equal. In this respect, we are verifying 
if the desired option was passed on the command 
line. 


The Code Listing 6 lists the get_option function. 
Handling array-like data in Assembly 


Maybe the quick discussion about get_option 
function has sparked some doubt in you. Since the 
command line content is stored in ‘argv’, the 
get_option function iterates over this array. How does 
the next array data read, compared with the function 
argument? 


The code uses the instruction ‘lea’. This function 
loads the effective address from some origin into the 
passed register. In this case, the ‘leal’ is being used 
to load a long (4-bytes) into the passed register. 
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The ‘lea’ instruction is combined with indirect 
addressing. Indirect addressing is aname of a 
technique that stands for access data stored into a 
memory location. So you have a pointer that points to 
another place where the relevant data is stored. 


In GNU Assembler, the indirect address syntax is: 
(<register>) 


When you indicate a register wrapped by 
parentheses, you are referencing the memory 
location pointed by the address loaded into the 
related register. 


If you want to look for N bytes forward, you should 
use 4(<register>), and -4(<register>) for N bytes 
backward. 


However, the indirect address syntax in GNU 
Assembler is much more expressive than it. You can 
also use indexed memory locations: 


base address (<offset>, <index>, <size>) 


This comes in handy for array typed data. An array 
in assembly is a sequential data chunk, even 
multidimensional arrays. 


Let’s pick a sample of 2x2 byte matrix. It stands for 
4-bytes sequentially defined. So, if you want to 
access row 1 and column OQ, you can do it easily 
using indexed memory location syntax, ‘lea’ 
instruction, and some basic math: 


movl $1, %ebx 


imul $2, %ebx # multiplies the total of 


bytes per row by ebx (result in ebx) 


movl SO, sedx # the column index 


leal matrix(%sebx, tedx, 1), tedx 


Take a look: 


equentially defined data for a 2x2 byte matrix 
osition0 Position 1 Position 2 Position 3 


[row index x total of byte per row] 1 x 2 = 2 > “Offset 
_ 2” 


a an 


[offset + column index] 2 + 0 = 2 > “Position = 2” 
Then, the item in the coordinate (1, 0) is ‘C’. 


In a ‘high level’ matrix, the (1, 0) item will also be ‘C’ as 
shown below: 


‘High level’ matrix definition 


KOO (BO 


‘D’ (1, 1) 


The Id1stgen function 


The Id1stgen strongly uses the indexed memory 
location technique. All that this function does is to load 
the initial game board state. Based on this initial state, 
the cellular automata will evolve in some finite or 
infinite pattern. 


The game works by command line. For defining a cell 
as alive, the user should pass the option “--row- 
number, column-number.”. 


The ‘Id1stgen’ traverses the game board verifying if the 
option , ‘--r,c.’, was passed. If it was the game 
board[r][c] will be loaded with the value 1, signaling an 
alive cell. Otherwise, it will remain as 0, a dead cell. 


This function uses ‘sprintf to format the desired option 
passed on the current row and column indexes. The 
formatted buffer is passed to ‘get_option’ function. 


The Code Listing 7 shows the most relevant parts of 
this function. 


The main game loop 


The main game loop is implemented by the function 
‘life’. This loop is in the Code Listing 8. The most 
important part of this loop is the instruction ‘call 
“genprint’, it prints to the screen the current game 
board state. The genprint is a pointer to a function. 
This is done because in some operating systems 
where ansi term capabilities are not present, we still 
can print the game board without ansi color codes. 
After printing the game board status, it would expect 
for a key event or simply sleep for some period using 
‘usleep . 
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Code Listing 6: Getting the options passed by command line. 


. type get option, 
get option: # get option(option, 


@function 
default , is boolean) 


# INFO(Rafael): Gets the option loading it into EAX 


#: if it does not exist load the default 
#: value from the stack (C Style) 
pushl %ebp 


movl %esp , %ebp 


cmp $1, argc 
je get option. default 


movl 8(%ebp), %edi 
pushl %edi 

movl $Oxffff , %ecx 
movb $0, %al 

cld 

repne scasb 

popl %edi 


subw $0xfffe , %cx 
neg %cx 


.ifndef —WIN32 
movl argv, 
. else 
xorl %edx, %edx 
leal argv(, %edx, 
. endif 


%Nedx 


4), %edx 


get option parse args: 
cmp $1, 16(%ebp) 
jne get option parse _curr_ arg 


# INFO( Rafael): Only parses boolean options 
sa that are equals in length. 


pushl %ecx 
pushl %edi 


movl (Y%edx), %edi 
movl $Oxffff , %ecx 
movb $0, %al 

cld 

repne scasb 


pop! %edi 


subw $0xfffe , 
neg %cx 


%cx 


movl %ecx, %ebx 


popl %ecx 


cmp %ecx, %ebx 
jne get option parse args go next 


get option parse curr arg: 
pushl %edi 
pushl %ecx 
movl (%edx), %esi 
repe cmpsb 


movl %ecx, %ebx 


pop! %ecx 
pop! %edi 


jne get option parse args go_next 
cmp $1, 16(%ebp) 


je get option parse _ args_set_ boolean 


movl %esi , %eax 
jmp get option epilogue 


get option parse _args_set_ boolean: 
movl $1, %eax 
jmp get option epilogue 


get option parse args go _ next: 
addl $4, %edx 


cmp $0, (%edx ) 
jne get option _parse_args 


get option. default: 
movl 12(%ebp), %eax 


get option epilogue: 
movl %ebp, %esp 
popl %ebp 


The remaining functions are related to the game 
rules application. For brevity, they will not be 
discussed here. In general, they use basic Assembly 
instructions such as ‘mov’, ‘cmp’ and jumps. | will 
leave those functions as a kind of exercise for the 
interested readers. 


How to build the code 


The code should be built using the GNU Assembler 
(gas). If it is the default assembler in your 
environment, you can call ‘as’. 


Code Listing 7: Loading the initial state of the game board. 


.type Idlstgen , @function 
Idistgen: # Id1stgen() 


pushl %ebp 
movl %esp , %ebp 


xorl %ecx , %ecx 
Idlstgen_rloop: 


xorl %edi, %edi 
movl %ecx, %ebx 
imul $CELL BYTES PER ROW, %ebx 


Idlstgen_cloop: 


pushl %ebx 
pushl %ecx 
pushl %edi 


pushl %edi 

pushl %ecx 

pushl $option cell fmt 
pushl $temp_ str 

call sprintf 

add! $16, %esp 


pushl $1 
pushl $0 
pushl $temp_ str 
call get option 


addl $12, %esp 


pop! %edi 
popl %ecx 
popl %ebx 


movb %al, cells(%ebx, %edi , 
inc %edi 


cmp cell col max, %edi 
jle Idlstgen_cloop 


inc %ecx 
cmp cell row max, %ecx 


jle Idlstgen_rloop 


movl %ebp, %esp 
popl %ebp 
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1) 


Compiling and linking in MINIX: 


as 


La 


-olife.o life.s 


-Bdynemtc Lire.6 =Le =m 


elt 1506: Minis “dynamic Linker 
usr liabexec/ld.elf so =olire 


Code Listing 8: The main game loop. 


1 .type life , @function 

2 life: # life () 

3 pushl %ebp 

4A movl %esp, %ebp 

5 subl $8, %esp 

6 

ig xorl %eax , Yeax 

8 xorl %ebx , %ebx 

9 

10 movl $0, —8(%ebp) 

11 

12 gameloop: 

13 cmp $1, quit game 

14 je life epilogue 

15 

16 call *xgenprint 

17 

18 cmp $1, interactive mode 
19 je gameloop_ enter. waiting 
20 

Zh: pushl usleep_ time 

22 call usleep 

23 addl $4, %esp 

24 

25 jmp gameloop_ gonext 

26 

27 gameloop enter waiting: 
28 leal —4(%ebp), %ecx 
29 pushl $1 

30 pushl %ecx 

31 pushl $0 

32 call read 

33 addl $12, %esp 

34 

30 gameloop_ gonext: 

36 call apply rules 
37 

38 cmp $0, generation nr 
39 je gameloop 

AO 

41 leal —8(%ebp), %edx 

a2 addi $1, (%edx) 

43 movl generation nr, %ecx 
44 cmp (%edx), %ecx 

45 jne gameloop 

A6 

AT life epilogue: 

48 movl %ebp, %esp 

49 popl %ebp 

oO ret 


of 


Compiling and linking in NetBSD: 


as -olife.o life.s -defsym 


__NétBol =! 


id =Bdynanmac 1176.0 =Le =m 
elt Loo. -Oyiem le Laker 
PUSt/ILAWexecC7iGselt So: =Olare 


Compiling and linking in OpenBSD: 


as -olife.o life.s -defsym 
__UpenBsbD =2 


1d.=Boynamic Jare.o =lc =—m 
Clit.13936 ObSC. =dy nance Linker 


(usv/iabexec/ild.so =Glite 
Compiling and linking in FreeBSD: 


as -olife.o life.s -defsym 
.__ ~reSeeeh: =1 


id =BGynamic Jite.o =e =H 
elt 13066 tbsd ~dynamic=lanker 
/usr/libexec/ld-elf.so.1 -olife 


The command lines for Linux, Windows, and Solaris 
are out of scope for this article. However, the general 
idea is almost the same. 


The flag -lc is used because the Assembly code is 
calling function form LIBC. The -defsym 
OS_SYMBOL=1 is used because the code has 
conditional directives that will include or ignore some 
codes at compile time. 


It is important always to generate an 1386 elf because 
we are using IA-32 Assembly, instructions for 32-bit 
bit based CPUs. 


Testing the game 


The Game of Life has famous patterns, some 
patterns are finite and other infinites. One famous 
pattern is called ‘Pulsar’. Pulsar has three 
generations and after the third, the game board state 
backs to the first generation in an infinite loop. In 
Figure 1, you can see these three states. 


a: First generation 


b: Second generation 


Figure 1: The infinite pattern called Pulsar. 
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To generate a Pulsar with the discussed code, you 
should execute the following command line: 


he ed, ae. eee 34,0. 5,7. 
26.0. ==), 7% 28527. * 

S S26 le @Tyde 29,5. =<@i.0. =—2,10. 
od, =o, = 7,0, % 

+ 225,50... =$6.0. 2=“7,105: 7,4. =H 1. 
soi tt, =5,1d, ==6,04, < 

> S04. ==0, 5, =9o,6. s910.o. ==tc. 
0). a0 0, —s170, 5. % 

S 0G. 10,7. S=hl, 7, 210.7. 
20h, =O, =O 

S109, sail, oO. =-10,0. -<17, 1). 
Hei i, Se, eek. 

> --11,14. --12,14. --delay=500 


--alive-color=cyan 


some specific codes necessary in 
discussed platforms 


In FreeBSD, it was necessary to define the following 
symbols: 


«Glob l Gnviron 
environ: 


.gquad 0 


—G1Obl proogname 
_, Progname: 


i ese 


<ASCLZ 


c: Third generation 


It is explained by the fact of being linked using libc. 
Additionally, in FreeBSD, the library internally uses 
the symbols ‘environ’ and‘ progname’. 


In NetBSD and OpenBSD, it was necessary to define 
a specific section inside the generated ELF. The 
technique is the same but the defined data differs a 
little from one platform to another. 


In OpenBSD, the following section is necessary: 


sSection “.novte.openbsd.1dent”", “a"™ 

sa Lion: Z 

seh. 26 

-int 4 

sie: ak 

sasci.Z “Open eSD™ 

aie: 

sel Lon -Z 


In NetBSD the section should be: 


.section ".note.netbsd.ident", "a" 
aie. 7 
-int 4 
ite, a 
.2a5CLZ, “NELBSD” 
~-byte OQ 
ee s oan C, 


lf those sections are not defined, the generated 
binary cannot be executed. These sections can be 
understood as an identifier for ELFs, for Open and 
Net BSD. Executables without them will not run. 
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Conclusion 


In this article, | showed you that it is possible to take 
advantage of LIBC in order to create portable 
Assembly programs. 


Different from high-level languages, Assembly is 
closer to the hardware. In this case, the better 
approach is to learn about the architecture that you 
frequently use. 


To learn Assembly is still worthy to date, especially if 
you are intending to become a system programmer, 
an information security researcher or still enthusiastic 
in deeply knowing more about the computer. 


The Book, Professional Assembly Language, by 
Richard Blum also is a good introduction; it uses 
AT&T syntax and GNU Assembly. 


The PC Assembly book can be a good introduction 


http://oacman128.github.io/pcasm/, it uses INTEL 
syntax and NASM. 


You can download, study and change the discussed 
Game of life implementation at 


https://github.com/ratael-santiago/life. 


If you have some questions about any part of the 
code that was not detailed here for brevity issues, 
feel free to contact me. 


FreeBSD 


SECURITY 


Port-Knocking 


You will learn ... 


¢ Introduction to Port-Knocking 


- Installing a Port-Knocking Client/Server 


¢ Configuring a Port-Knocking Server 


¢- Port-Knocking 


- Create Reverse-Shell 


Introduction to Port-knocking 


Changing the port numbers is not a proper security 
policy. Changing the port numbers and services is a 
common mistake. Hackers are going to find out what 
you are hiding by just a simple port scanner which 
takes about 2 minutes, nothing more. Nmap will take 
care of this process, and it’s over. 


Port-Knocking mitigates this type of security issues. 
A Port-knocking server listens to all traffic on an 
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Ethernet (or PPP) interface, looking for special 
"knock" sequences of port-hits. A client makes 
these port-hits by sending a TCP (or UDP) packet to 
a port on the server. This port need not be open 
since knockd listens at the link-layer level, it sees all 
traffic even if it's destined for a closed port. When 
the server detects a specific sequence of port-hits, it 
runs a command defined in its configuration file. This 
can be used to open up holes in a firewall for quick 
access. The complexity of the knock can be 
anything from a simple ordered list (e.g., TCP port 


1000, TCP port 2000, UDP port 3000) to a complex 
time-dependent, source-IP-based and 
other-factor-based encrypted hash. 


More Details 


Port-knocking can be implemented in a number of 
ways, such as: 


- Daemon: With a simple daemon (service), 
you can run your port-knocked server. 


¢ Kernel-Module: Kernel-Module or device 
driver is more complicated, but it’s more 
stable. 


In fact, Port-knocking has been used in many 
hacking tools, like rootkits. 


Installing Port-Knocking Client/Server 


There is a flexible Port-knocking server and client. 
You can easily install it by port tree or pkg: 


# cd /usr/ports/security/knock 
# make install clean rehash 


Tip: issue the above commands on both the client 
and the server. 


This port consists of two app: 

¢ knockd -- Port-knocking server 

¢ knock -- Port-knocking client 
Configuring Port-Knocking Server 


To configure knockd service, you have to edit 
knockd.conf. To facilitate that, we must first create a 
conf file from a sample and then add configurations: 


# cp /usr/local/etc/knockd.conf.sample 
Pasicy Local/ ere knockd:. cont 


+ @e /USr/ Local/secc7 knockd.cont 
Contents of kKnockd.conf: 
[optzone.| 


logfile = /var/log/knockd.log 


InMcLerrace = rel 


[openSSH] 
sequence = 7000, 8000, 9000 
Sey ElmieouL. =. 
command = /sbin/ipfw -q add 


JULOUUG- pass DroLo Cp SrC=ip GLP. 
OSt=Dorke ZZ 


tcpflags = syn 
[elosesod. 
sequence = 9000, 8000, 7/000 


| 
Ol 


seq Cineour = 


command /sbin/ipfw -q 
delete 00100 pass proto tcp src-ip *IP% 


OSE=pOre..2Z 
tcpflags = syn 


As you can see, there are three sections and many 
directives. An options section which is dedicated to 
interface name and log file. The other two sections 
are for executing the command by a custom 
sequence of ports within five seconds that has a syn 
flag. 


The first command adds a rule number 00100 to 
lofw that allows connection to SSH port by IP 
address of who knocked successtully. 


The second command deletes the previous rule. 
However, you can execute any command. 


One of the most important directives is 
One Time Sequences. You can add this directive 


by: 


One Time Sequences = 


/path/to/one time sequences file 


The above referenced file contains the one-time 
sequences to be used. Instead of using a fixed 
sequence, knockd will read the sequence to be used 
from that file. After each successful Knock attempt, 
this sequence will be disabled by writing a ‘#' 
character at the first position of the line containing 


the used sequence. That used sequence will then 
be replaced by the next valid sequence from the file. 


Also, TCPFlags directive can be these values: 


TCPFlags = fin|syn|rst|psh|ack|urg 


When using TCP flags, kKnockd will IGNORE TCP 
packets that don't match the flags. This is different 
from the normal behavior, where an incorrect packet 
would invalidate the entire knock, forcing the client 
to start over. Using "TCPFlags = syn" is useful if you 
are testing over an SSH connection, as the SSH 
traffic will usually interfere with (and thus invalidate) 
the knock. Separate multiple flags with commas 
(e.g., T'CPFlags = syn, ack, urg). Flags can be 
explicitly excluded by a "!" (e.g., TCPFlags = 
syn,!ack ). 


On your serverm issue the following command to run 
the port-knocking server: 


# knockd 


Port-Knocking 

On your client, issue this command: 

# knock “server ip” 7000 8000 9000 

Replace “server ip” with your server’s IP. 

There are other ways to do Port-Knocking: 
Nmap 


The Nmap is a Network exploration tool and security 
/ port scanner, but you issue this command to 
initiate port-knocking: 


Oe so ae 7 COO WOO 2oCU; 


-qhOsk. EIMeoul 20 =a -reriites: 0 =p 


ao. nitap =Pn 


ox “Server i077 done 


Netcat 


The nc (or netcat) utility is used for just about 
anything under the sun involving TCP, UDP, or UNIX 
domain sockets. It can open TCP connections, send 
UDP packets, listen on arbitrary TCP and UDP ports, 
do port scanning, and deal with both IPv4 and IPv6. 
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And it can do the same thing with: 


# nc -z “server ip” 7000 8000 9000 


Pros and Cons 


Everything has its advantages and disadvantages 
and port-knocking is not an exception to this rule: 


Pros 

- Very low overhead 

- Easy to deploy 

- Compatible with any platform 

- Useful directive 

- Very hard to brute force 

Cons 

¢ Can be a single point of failure 

¢ Vulnerable to man in the middle attack 


- Sensitive to latency 
Creating Reverse-Shell 


Reverse shell is a type of connection that the server 
starts to communicate with the client, and allows the 
client to use its shell. As you can imagine, the server 
has no open port to listen but you can connect to it. 


All you do is to edit knockd.conf and replace that 
command with this: 


command = ssh -fN -R 9000: Localhost:2? 


root@sIP% 


This command binds client port 9000 to server port 
22. 


And then from client, issue this: 
# ssh root@localhost -p 9000 


The client connects Itself at port 9000, but because 
ports are interconnected, the client is going to 
connect to the server. 


Considerations 


Configure the server to do password-less ssh (public 
key). Make sure that parameters such as 
TCPKeepaAlive, ClientAlivelnterval, 
ClientAliveCountMax and GatewayPorts are set to 
appropriate values. 


Conclusion 


Port-knocking is not only about opening a port or 
something like that. You can do whatever you want 
like executing a special script or something like 
reverse shell or, etc. 


Useful Links 


http://meetbsd. ir 


http://in4bsd.com 
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BSD Certification 


The BSD Certification Group Inc. 
(BSDCG) is a non-profit organization 
committed to creating and 
maintaining a global certification 
standard for system administration 
on BSD based operating systems. 


@ WHAT CERTIFICATIONS ARE AVAILABLE? 


BSDA: Entry-level certification suited for candidates 
with a general Unix background and at least six months of 
experience with BSD systems. 


BSDP: Advanced certification for senior system administrators 
with at least three years of experience on BSD systems. 
Successful BSDP candidates are able to demonstrate 

strong to expert skills in BSD Unix system administration. 
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We're pleased to announce that after 7 months of 
negotiations and the work required to make the exam 
available in a computer based format, that the BSDA 
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Payments are made through our registration website: 
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MIINIX 


Design and Analysis of 
Object-Oriented Feedback 
Process Scheduler in User 


Level 


Some operating systems need modularity between their components as one of the main factors to 
implement a microkernel that is both secure and fault tolerant. When we consider dealing with operating 
system structures as objects, we see that it greatly helps to implement the desired modularity in these 


systems. 


The purpose of this work is to present an object-oriented design for a feedback process scheduler that runs 
on user mode. We show the details of the original structured implementation, the new pro-posed design, and 
show the adopted mechanism to interface the new scheduler and the other servers or even the kernel. 


We also show a basic analysis of various execution times from CPU bound and I/O bound processes, using 
well-known benchmarks from the literature for both schedulers: structured scheduler and object-oriented 


scheduler. 


Source Code: httos://github.com/rhiguita/minixsched 


Accessing computer resources by a process 
requires a methodology of how the process gains 
access to them. For the past years, a lot of research 
has been done on this question, but it is always 
relevant to improve current models. It is possible to 
analyze (with different metrics) how the operating 
system deals with different schedule policies, as we 
can see in the work of Kolivas [9, 10] and Guerrero et 
al. [5]. 


The current literature [16] encompasses a wide 
variety of mechanisms on scheduler developments, 
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discussing in greater detail different policies and 
their modeling and implementation. One of the most 
commonly used schedulers for desktop computers 
is the famous Round Robin with Priorities, analyzed 
by Guerrero et al. [5]. 


Although it is difficult to introduce large changes on 
traditional schedulers, we can see in Swift's work 
[16] that, by exploring some specific information 
about the process's behavior, we can adjust, for 
example, the priority and quantum in a more 
dynamic way. A similar approach, although with 


methodological differences, can be seen in Teller 
and Seelam [19]. 


Because Swift's work [16] motivated our research on 
process's scheduler, we decided to use the same 
operating system used by Swift, Minix [12], which is 
an operating system that has a microkernel structure 
and uses messages to communicate between 
processes. 


However, microkernel based operating systems, 
such as Minix, have particularities that need to be 
considered in the process of scheduling tasks, for 
example: (i) most of the daemons run in user 
level; (ii) the impact, with respect to the execution 
time, of Inter Process Communication (IPC) (i.e.: 
how processes communicates ) [2]. 


Considering the proposed process scheduling and 
modularity of Minix’s microkernel layout, we think 
that the best approach to deal with processes is to 
implement them as objects. To start, we choose the 
FeedBack Scheduler and propose an 
Object-Oriented model with a small interface to 
communicate each other and with the kernel. 


Because execution time is also relevant, we will 
compare the execution time from the original 
Feedback Scheduler and the new Object-Oriented 
version of the same scheduler. 


The remaining sections of this article are organized 
as follows: Related work; Scheduler explains the 
original version of the Feedback Scheduler, and our 
Object Oriented model; Experimental Study 
evaluates our approach, comparing it with the 
structured version; Results closes the article with our 
final considerations. 


RELATED WORK 


Herder at al. [6] presents a study about fault 
tolerance on microkernel based operating systems. 
It is worth mentioning that this work also addresses 
kernel servers that run in user level. 


The process of moving the scheduler from kernel 
level to user level is described in Swift[16], where it is 
proposed the Feedback Scheduler. 


On new approaches to processes scheduling on 
interactive systems for personal computers, it is 
relevant to mention Kolivas efforts to improve the 
Linux scheduler [9, 10]. 


In [20] we can see how is it possible to change old 
paradigms and design the whole operating system 
using an Object-Oriented approach. Concerning 
different ways to deal with scheduling, we have the 
K42 scheduler [1] and also Juggle [7]. 


Guerrero et al. [5] compares different schedulers and 
variants of using specific metrics (Such as, execution 
time, throughput, etc.). 


In conclusion, the literature indicates the opportunity 
to demonstrate that is possible to improve the 
modularity, from the point of view of the source 
code, of microkernel based operating systems by 
treating their structures as objects. 


SCHEDULER 


The scheduler of an operating system is responsible 
for the alternation of multiple applications running 
concurrently. Ultimately, schedulers define the logic 
used to choose which process the operating system 
will execute at a given moment. 


When we observe the operation of Minix’s scheduler, 
since kernel version 3.1, an interesting fact can be 
noticed: most of it is located in the user-mode. 


Swift aim was to migrate all the possible scheduler 
to user-mode, in order to make the system more 
fault tolerant, and also simplifying the adoption of 
multiple schedulers in the same operating system at 
the same time[16]. 


During his studies and experiments, it was found 
that a part of the scheduler still would need to be in 
kernel mode. The main reason for this is the fact that 
the first processes created, when the system is 
being booted, needs an initial low-level management 
capability; later on, it is possible to transfer such 
Capability to the user mode. 


Another point worth mentioning is that Minix uses 
messages to communicate between processes 
(IPC), and a user-mode scheduler needs more 
message exchanges to perform the same tasks with 
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regard to the old kernel level scheduler (Minix’s 
Kernel version before 3.1). This means that more 
time is spent on the communication between 
user-level scheduler and the “small” kernel-level 
scheduler. 


Considering that the main goal of Minix isn’t the high 
performance but high availability [6], migrating the 
scheduler to user-level is a typical but valid in this 
operating system model. 


Feedback Process Scheduler 


Proposed by Swift [6], the Feedback Scheduler 
creates some metrics and uses them in scheduling 
decisions. Thus, this scheduler promotes a more 
accurate division of the hardware resources. The 
former version used in this project uses the metrics 
showed in [4]. 


Basically, the Feedback Scheduler uses messages of 
type “limit quantum reached”, sent by Minix’s kernel, 
and then, attaches metrics within these messages, 
giving all this information to the scheduler in 
user-mode. 


IPC and the Scheduler 


To understand how the process scheduler works on 
Minix, we have to consider the way that servers and 
kernel use to communicate. In Figure 1, we can 
understand how the scheduler receives messages 
from others servers and the kernel. 


Figure 1. IPC between servers and kernel 


In Figure 1, each arrow is tagged with a number that 
identifies which type of messages they could send to 
the scheduler. The Process Manager can send the 
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following messages (referred by number 1): START, 
INHERIT, STOP, and NICE. The Reincarnation Server 
can send just messages of type START (referred by 
number 2). Finally, the KERNEL can send messages 
of type NO QUANTUM (referred by number 3). 


As we can see, we have four different kinds of 
messages: START, STOP, NICE and NO QUANTUM. 
The message called INHERIT is a particular case of 
the START message. Therefore, we deal with this 
message the same way we deal with the START 
message (except for very specific details that are not 
going to be discussed in the scope of this paper). 


system Calls 


Swift [6] proposed two system calls to enable the 
communication between the user space process 
scheduler and the small scheduler interface that 
belongs to the kernel (Figure 2). 


KERNEL 


Figure 2. System calls of scheduler 


The first system call is “sys_schedctl”, and it is used 
by the scheduler to request the control over a 
specific process. 


The other system call is “sys_schedule”, and it is 
used when the scheduler needs to send the basic 
information that is used by the scheduler interface 
(e.g., priority and quantum). 


It is highly recommended to read [6] in order to 
understand all the details involved during the 
scheduler migration process from kernel space to 
user space. 


Structured Programming Version 


To better understand how the original code of the 
Feedback Scheduler is, a flow chart was done to 
represent the flow between each function. In Figure 
3 we can see how the “communication” between the 
structured functions Is. 


The main function is an infinite loop that waits for 
messages coming either from other processes or the 
kernel. Further details about this can be found in 
section [PC and the Scheduler. 


When a message reaches the Scheduler, it has a 
type that is mapped to one of the following 
“message” functions (called “MF”): START/INHERIT, 
STOP, NICE or NO QUANTUM. Then each one of 
these MF can call other functions, some of them with 
a unique use of an MF and, most of them, shared 
use between the others MF. 


For example, Figure 3 shows that the STOP 
message type uses two functions: accept_message 
and sched_isoemtyendpt, both shared with NICE 
function. On the other hand, NO QUANTUM uses 
two shared functions (sched_isokendpt and 
schedule_process) and one with unique use 
(burst_smooth). 


START and 
INHERIT 


acc ept_ 


message 


is system 
proc avaiable 


CPU _ iS 


Figure 3. Flow between functions 


sched schead_ 
isemtyendpt 


Object Oriented Version 


As mentioned before, considering that one of the 
main goals of Minix and other microkernel operating 
systems is to provide modularity, we decided to deal 
with the process scheduling using the Object 
Oriented model instead of the structured model. 


For example, in the structured programming 
approach, when the Scheduler receives a message 
from a user program (e.g., “NICE”) through Process 
Manager, it identifies the message and calls the 
function associated with such type. This function 
identifies the number of the process using the 
“endpoint” and checks if it is a valid one on which 
adjust the priority. After this, the user level scheduler 
has to communicate with the kernel, using the 
system call described before, to inform that the 
priority of a specific process has to be changed 
inside the kernel. 


We think it is better to deal with this as a method 
from a class despite the original approach shown in 
section Structured Programming Version because 
when we think about a modular system, it is difficult 
to think of a process individually and then have a few 
individual functions to deal with specific situations. 


schedule 
isokendp 


Proc ess 


burst _ 
smooth 


schecdule 


We propose the following class (Figure 4) to deal 
with every process on the system, having all the 
originals variables as structures and all the 
separated functions as method belonging to this 
specific class. 


+endpoint: endpoint t 

+parent: endpoint t 

+max priority: unsigned 
+priority: unsigned 

+base time slice: unsigned 

+time slice: unsigned 

+cpu: unsigned 

+cpu mask[BITMAP CH]: bitchunk t 
unsigned 
unsigned 


+burst history[LENGHT]: 
+burst hist cnt: 


-plckK cpu(): vold 

burst smooth(burst: unsigned): int 
-schedule process(Tlags: unsigned): 
do stop scheduling(): int 
-d0 nice(new g:unsigned): 
do 
-d0 


int 


int 
noquantum(ipc:unsigned): int 


Start scheduling(*dec:decp): int 


Figure 4. Scheduler class 


As we can see, considering the last example about 
the “NICE” message, in this model it is much easier 
and rational to deal with a process. By comparison 
with the older model, now we have the original value 
of the priority as an attribute (called priority), and 
then we just call the method that adjusts this value 
to a new one. 


The Interface (Decoder) 


To make things work with this new approach from 
our scheduler, we implemented a small piece of 

code to interface the new scheduler with the other 
system’s components. We call this the “decoder”. 


This “decoder” (Figure 5) is responsible for receiving 
the messages from other parts of the system and, 
considering the process that is going to be 
“changed”, access a specific position of the vector 
of objects from the class Scheduler. 
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Message Recv. 
by Scheduler 


schedule[PlD] 


Figure 5. Decoder 


EXPERIMENTAL STUDY 


In this section, we present all information about our 
experiments to make them replicable [3]. 


First of all, we get the original code from Swift's 
work [16], originally implemented on Minix 3.1, 
ported by Ferreira and Lopes [4] to Minix 3.2.1 (the 
present version of Minix when we started this work), 
then we implemented all that was described before 
using C++ language. 


As mentioned, the scheduler of Minix runs on user 
space, but his binary should be within the kernel 
image file. Thus, we generate two different kernel 
images, one with the original Feedback Scheduler, 
and the other one with the new object-oriented 
version of the same kind of scheduler. 


To compile both versions of the scheduler, we used 
clang 3.1, which is normally used to compile all the 
source code from Minix. To change the scheduler 
and perform the experiments, we had to reboot the 
machine, to load the right version of the kernel 
image. 


Concerning the experiments, we followed the 
approach showed in [14, 15], which uses the DOE 
(Design of Experiments) method [13]. This method 
requires changes on selected input factors to 
observe different results as output. In our case, the 
output or response variable is the execution time of 
each selected program. The DOE is further detailed 
in sections Design of Experiment. The experiments 
were done on an Intel Atom N270 1.6GHz with 1GB 
DDR2 SDRAM memory running Minix 3.2.1. All the 
execution times of these experiments were 
measured using the time program [8]. 


Design of Experiment Number 1 


This first experiment aims to analyze the effect of the 
level of compiler Optimization (O2 and O3 from GCC 
4.4), and the Scheduler (structured or 
object-oriented) over the execution time of the 
well-known Linpack Benchmark for personal 
computers [11]. Table 1 shows the input factors 
corresponding to each signal from the matrix used 
on the DOE method [13]. 


Table 1. Factors and levels of the first experiment 


Factors = sLeveel (-) [Level (+) 
Scheduler SP 00 
03 


Design of Experiment Number 2 


This second experiment aims to analyze the effect of 
the use of two different I/O programs (cp and 
bunzip2), and the Scheduler (structured or 
object-oriented) over the execution time of copying a 
file and decompressing, as suggested by Ferreira 
and Lopes [4]. Table 2 shows the input factors 
corresponding to each signal from the matrix used 
on the DOE method. 


Table 2. Factors and levels of the second experiment 


Level (-) Level (+ 


SP CO 
cp —_—_—bunzip2 


cheduler 
rogram 


RESULTS 


In the following next graphics, that shows the results 
of the experiments, the black color refers to the 
original Feedback Scheduler, while the gray color 
refers to object-oriented version. 


We also decided to normalize the results using 
execution time of the original Feedback Scheduler. 
Therefore, it is possible to see that the black bar of 
the graphics is always at 100%, and the gray one 
will be made considering this normalized parameter. 


Experiment #1 


Figure 6 shows the results of the first experiment 
(CPU bound). We observe that when we have the 


same level of GCC compiler optimization (O2) of the 
Linpack Benchmark, the object-oriented version 
(OO) has the worst execution time (0.12%) 
compared with the structured version (SP). 


But when we changed the GCC compiler 
optimization level to O3, it is possible to see that we 
have the same execution time with the two different 
schedulers (SP and OO). 


Figure 6. Result of CPU bound test 


Experiment #2 


We divide the results of the second experiment (I/O 
bound) in two bar charts (Figure 7 and Figure 8). 
Figure 7 presents the results of the program cp, 
where is possible to see that the execution time of 
the object-oriented version (OO) is 5.12% slower 
than the original one (SP). 


Figure 7. Results of test with cp (lO bound) 


In Figure 8 (results of the program bunzip2) we have 
similar behavior, but now the execution time of the 


object oriented scheduler (OO) is just 0.82% slower 
than the original one (SP). 


Figure 8. Results of test with bunzip2 (lO bound) 
CONCLUSION 


In this work, we presented two different things: (i) a 
design of a scheduler using an Object-Oriented 
Paradigm, implementing it in the C++ language. We 
started by choosing the Feedback Scheduler, coded 
using a structured language, in this case C. Both 
versions (structured and object-oriented) of the same 
scheduler were compiled using the clang native 
compiler from Minix. We experimentally test (ii) how 
these two different programming approaches affect 
the execution time from two different types of 
processes: CPU bound and I/O bound processes. 
We followed the DOE method [13] and the approach 
suggested in [14, 15] to do all the experiments. 


Considering the design (I), as we can observe in 
section SCHEDULER, it’s possible to deal with the 
scheduler as a class and the processes being 
scheduled as objects, improving thus the modularity 
of an already modular system, such as microkernel 
design of Minix. 


Regarding the experiments (II), the CPU bound tests 
showed that the object oriented design didn't affect 
much the execution time from the selected 
benchmark. When we adjusted the gcc compiler 
optimization parameter to O3 (“strong” optimization) 
to the Linpack Benchmark, we had exactly the same 
execution time. The I/O bound tests showed that, for 
some specific reason that we didn't discover yet, the 
performance of the object oriented scheduler wasn’t 
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the same when we copied a file using the cp 
program. 


As future work, we suggest an object-oriented 
design to these servers of Minix: Process 
Management and Reincarnation. This will greatly 
help performance (execution time) improvement, 
allowing the removal of the decoder used in this 
work. 
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Interview 
with Joshua 
D. Drake 


Can you tell our readers about yourself and your 
role nowadays? 

| am Joshua D. Drake; | am the founder of Command 
Prompt, Inc. and United States PostgreSQL. 
Additionally, was the former Director of Software in 
the Public Interest, and current Director of The 
Postgres Foundation. | have been doing this 
Open-Source thing since Linux SLS. | am an avid 
outdoorsman, family man, and a Linux and Postgres 
lover. | currently lead Command Prompt, Inc., the 
oldest Postgres consultancy in North America. | am 
also the Co-Chair of PGConf US, the leading 
non-profit Postgres conference in the United States. 


How you first got involved with programming? 

| worked at Powell's books in Oregon and they 
needed a special order database. | picked up a book 
on DBASE and the rest is as they say, "history". 


What is your the most interesting programming 
issue, and why? 

Complexity. As | have grown professionally, | have 

also gotten less technical on the engineering side. | 
have watched as many frameworks either: 


A. Solve a problem already solved 
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INTERVIEW 


B. Continue to increase in complexity without solving 
an actual problem 


| would love to see engineering projects start talking 
more directly with operations and deployment staff 
to increase the usability of the user interface to an 
engineering project. 


What tools do you use most often, and why? 
Outside of Postgres (which the reasons should be 
obvious), Thunderbird. There are those that would 
laugh at this, but it is my central point of all 
communication. This communication may come 
from Git, Redmine, Zabbix, a custom billing app, or 
any other source. When | combine that with the 
advanced filtering capabilities of Thunderbird, | 
always know when | need to respond to something. 
This could be peer review requests, pull requests, or 
even a need to check in on a Postgres server due to 
a slow query or high IOWAIT%. 


Please tell us more about your current projects? 
On the community front, | am actively involved in 
organizing PGConf US and leading the 
@AmplifyPostgres projects. | find that building 
people in technology is more fulfilling than building 
technology nowadays. Both of these projects have 


THE NEXT BEST POSTGRES 


goals of advocating and educating people on TOP REASONS TO ATTEND 
awesome technology. PGCONF US 


What's the best advice you can give to others? EDUCATION 
Avoid group think. It is the death of Liberty that Training opportunities in 
Open-Source provides. Administration, Performance, 


Containers, Oracle to Postgres 
Migration and More! 

Please tell us more about PGConf US.Why? What 

for? For Whom? 


PGConf US is the largest PostgreSQL conference in 


North America. The success of this project has Bese yy 
allowed us to launch PGConf Org which is an 

international effort to support conferences around the CONTENT 

globe. The project exists as an exemplification of: Featuring up-to-date subject matter 


such as PostgreSQL 10, PLv8 
Kubernetes, Dianjo, PostGIS, and 


People, Postgres,and Data. Multi-Master replication 


In short, PGConf US wants to build people so they 
can use Postgres to wrangle all of their data. It is a 
conference for anyone interested in Postgres, from 
hobbyist to engineer to DBA to developer to regulator. 
We want everyone to help us build this awesome 
database. 


Do you have any specific goals for the rest of this PGCON F US FACTS 


year? 
To continue to grow Command Prompt, Inc.'s cloud 
support offerings, and to make PGConf US the best COMMUNITY-DRIVEN 


place for Postgres education and advocacy. 100% community effort driven by a 
diverse team of enthusiastic 
Postgres professionals 


Do you have any untold thoughts that you want to 
share with the programmers? 

Don't be afraid to stand up to leadership. Remember 
that leaders are not bullies (leaders who bully are just 
bullies, not leaders). Leaders listen, collaborate, and 


are transparent in their leadership decisions. PGCONF LOCALS PGCONF NATIONAL 
Conversely, don't be afraid to follow. You aren't good 
2 days of Postgres content Jersey City, NJ 

at everything; celebrate your talents, lead where it Local community partners April lb - 20, 2018 

makes sense, follow where it doesn't. Seattle, WA: November 13 - 14 > days of Postgres content 
Austin, TX: December 3 - 4 Technical Trainings 
Denver, CO: February 2018 Breakout Sessions 

Would you like to add anything? | Exhibit Hall 


Thank you for the opportunity and | hope to see all 
your readers at one of our events! 


Thank you 


Visit pgconf.us for more info 


Postgres is the fastest growing Open Source database 


community in the world lim 
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interview with 
Steve Wong 


Steve Wong is the director of product management at iXsystems. He is a senior level 
professional with over 20 years of experience in the fields of data communications, 
enterprise storage, networking, telecommunications, brand marketing, publishing, 
e-commerce and consumer package goods. Prior to iXsystems, Wong worked at 
SerialTek, Hitachi Data Systems, ClearSight Networks, Finisar, Anritsu and Mattel. 

He began his career in investment banking at Bear Stearns and then served as a 
member of technical staff at AT&T Bell Laboratories. Wong holds a BA from New 
York University and a MBA from the Kellogg Graduate School of Management, 
Northwestern University. 


Let's start from the beginning; please tell our readers about yourself and your current role? 

| am the director of storage product management at iXsystems, and | have been in this role since December 
2016. | sometimes get asked what exactly does a product manager do and depending on who you ask, you 
may get a slightly different answer. But in general, a product manager has an overall responsibility and 
accountability for a product line or product lines. In my case, the TrueNAS, FreeNAS Mini, and the FreeNAS 
Certified product lines are my team’s responsibilities. 


A little bit about myself. Although | currently reside in San Jose, California, | was born in Hong Kong and grew 
up in New York City. Additionally, | have lived in Evanston, Illinois and Boulder, Colorado. | started my career 
as a software engineer before transitioning over to product management and marketing. For the past 15 years, 
| have been focusing on data center technologies, particularly around enterprise networking and storage. | am 
passionate about product management and marketing as they relate to technology products. 


How did you first get involved with iXsystems? 
Interesting enough, | first learned of iXsystems about six or seven years ago when | was working at another 
enterprise storage company. | was researching on open-source storage companies when | came across 
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FreeNAS. | became intrigued as | did not have that much needed experience or knowledge on open-source 
ecosystems and the concept of communities. | even downloaded the FreeNAS software and installed it on one 
of my unused computers at that time. Fast forward to last year when | noticed iXsystems was looking to hire a 
product manager. | submitted my resume and after several of rounds of interviews, | received an offer to join 
the company. 


Lately, the iXsystems company celebrated the release of the TrueNAS X10. Can you tell us what are the 
main innovations of the new TrueNAS if we compared to the previous generation? 

We launched the new 37 generation TrueNAS X10 in June of this year. It is a cost-effective enterprise storage 
solution that we are targeting at small and midsized businesses. Some of the main innovations include the 
X10’s high-density — being able to provide up to 120TB in a 2U form-factor and 360TB in a 6U form-factor. At 
the heart of each storage controller is a high-performance but power efficient Intel D class Xeon System on a 
Chip (SOC) processor. High-speed error correcting DDR4 memory provides for high reliability. The X10 is fully 
SASS compliant, operating at line-rates of 12Gb/s for the data connectivity to storage. Lastly, the interconnect 
between two storage controllers is a high-speed PCI Express 3.0 x8 connection. All this adds up to a modern 
and powerful enterprise storage system. 


What are the main advantages of TrueNAS? 

TrueNAS is based on FreeNAS but is qualified and tuned for enterprise storage applications. TrueNAS is a 
unified storage solution which supports the full range of block and file protocols. There are some powerful and 
unique capabilities that TrueNAS has over other competing solutions. TrueNAS leverages a technology known 
as TrueCache that delivers better read and write system performance through the use of system RAM and 
SSDs. Furthermore, the file system is self-healing, providing protection for your data. It is due to this capability 
that we often say the data you store on a TrueNAS today and even 10 years from now will not change. Like 
some other enterprise solutions, TrueNAS has capacity optimization features such as in-line compression and 
deduplication. But we offer intelligent compression. TrueNAS checks to see whether data would benefit from 
compression beforehand. Additionally, TrueNAS offers unlimited snapshots for local data protection and 
replication for remote data protection to round out its disaster recovery capabilities. There are also enclosure 
management services which will let you Know which disks have failed in the array so they can be quickly 
replaced. TrueNAS is also VMware, Citrix and Veeam certified. Moreover, it is a fully supported product, 
backed by 24/7 customer support from iXsystems’ technical support team. | could go on, but | think you get 
the idea of the capabilities and advantages of the TrueNAS. 


What is the current status of development? What’s next? 

We just released TrueNAS 11.0 which introduces support for the object-based Amazon simple storage service 
(S3) API, allowing TrueNAS users the ability to build and deploy private clouds. Furthermore, customers also 
benefit from significant performance enhancements with certain workloads. For example, testing indicates file 
serving operations perform up to 25% faster with an up to 45% reduction in latency. The recently introduced 
FreeNAS 11.0 also incorporates a new beta GUI and support for virtualization -- these capabilities will ultimately 
make their way over to the TrueNAS platform. We have now turned our development efforts to future releases 
which promise to provide even more feature enhancements and functionality. We have some pretty exciting 
new things happening on some fronts later this year that | am unable to talk about quite yet. However, | promise 
to provide an update in about a quarter. 


What would you advise me if | want to install a NAS at home on my hardware? Which is a better option, 
FreeNAS or TrueNAS, and why? 

Actually, to build a NAS at home using your hardware and iXsystems software, your choice Is limited to 
FreeNAS. That is because, TrueNAS is an appliance-based solution whereby iXsystems provides customers 
with a fully qualified and tested solution. And unlike FreeNAS users, TrueNAS customers receive full customer 
and technical support from iXsystems. They also have access to enterprise capabilities like high availability 
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(redundant storage controllers) and VMware integration. For folks that choose to build their NAS, they can 
always download the latest FreeNAS software at_www.freenas.org. 


Can you tell us what BSD means for you? Is it something that is still growing and developing? 

The BSD Operating System (and FreeBSD in particular) is at the heart of what iXsystems uses for all its 
Open-source projects. BSD has evolved over the years, bringing with it enterprise-class features such as ZFS, 
in a lightweight operating system that continues to have a reputation for speed, security, and stability. The BSD 
user base and ecosystem also continue to expand in both size and reputation. 


Do you think that building a community and supporting each other is important in this industry? 

Behind many open-source software projects is a vibrant community where members support one another and 
the overall community. That is certainly true of FreeNAS, our open-source storage operating system. FreeNAS 
owes much of its success to the community that helps make the project thrive. Members help with feature 
development, testing, documentation, and even language translation. The software has been downloaded 
more than 9 million times, making it the world’s number one storage operating system. We could not have 
gotten to this milestone without the support and help of the entire FreeNAS community. 


Do you have any specific goals for the rest of this year? 

One of the reasons we released the TrueNAS X10 was to grow our presence in a market segment that we had 
not traditionally been in before, and we will continue to develop, nurture, and grow that market. Our goal has 
always been to make sure we continue to listen to our customer base and continue to provide additional and 
new capabilities that help them address and solve their business challenges and problems. 


Do you have any untold thoughts that you want to share? 

When | was studying for my computer science degree in college, | remember taking every programming 
language class that was offered thinking that | will never need to learn another one again throughout my career 
as a developer. Obviously, that was wishful thinking on my part in more ways than one. And although | no 
longer code or write programs, | believe some of the skills that | picked up when | was a developer have served 
me well as a product manager. One example is my job as a product manager often requires me to manipulate 
large quantities of text data to develop financial models or perform analysis. You may be surprised to learn 
that for some of these tasks, | still sometimes use the vi editor to make what can be very complex changes. In 
my case today, it is MSDOS vi. 


Summing up, please tell our readers why TrueNAS and FreeNAS are so unique and what we, as users, 
can achieve when we decide to use them? 

A small number of companies account for most of the world’s commercial storage arrays. Increasingly, 
patenting and restrictive contracts are used to enhance the power and control of these companies over the 
storage that runs the world’s businesses. 


Today, iXsystems leads the industry in building innovative storage solutions for a global marketplace based on 
the concept of open technologies. 


Our stewardship of many leading open-source projects, our commitment to the open-source software 
community, as well as our decades of hardware design experience and expertise, are the reasons why 
thousands of companies, universities, and government organizations rely on our storage and what drives us as 
we enter our third decade in business. 


You can learn more about the company and us at www.ixsystems.com. 


Thank you 


48 


Starting with Python 


Programming Language 
and the Use of 


Docstrings 


Sotaya Yakubu has been an active contributor to open source 
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forum, Entrepreneur and working as a Software Engineer with a new 
Software startup company funded by Exist. In the past he was 
involved as software developer with several companies and 
individuals such as GenapSys, Mediaprizma kft, Multimodal Speech 
Processing research Oroup vorvodarland University elec. 

For the past eight years, he is also involved in development of 
mobile API’s and research in Artificial Intelligence mainly 
towards developing intelligent agents (autonomous physical agents) 
capable of unsupervised learning. 

He writes about experiences, solutions to problems in the area of 
Software Engineering and Linux systems. 


In this article, I will be talking about Python as a general 
purpose programming language which is designed for easy 
integration, readability and best of all, the ease in expressing 
concepts ina few lines of code. In addition, we will be doing a 
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The social implications of technological advancement are often presented in positive terms, yet 
our core working patterns have slightly changed since the agricultural age. With the increasing 
expansion of automation, robotics and artificial intelligence into traditionally secure employment 
sectors, what changes can we expect to see in a society where employment opportunities for 
the unskilled, semi-skilled and the professional rapidly shrink? 


About the Author 


Rob Somerville has been passionate about technology since his early teens. A keen advocate of open systems since 
the mid-eighties, he has worked in many corporate sectors including finance, automotive, air- lines, government and 
media in a variety of roles from technical support, system administrator, developer, systems integrator and IT 
manager. He has moved on from CP/M and nixie tubes but keeps a soldering iron handy just in case. 


One advantage of being long in the tooth is that you can watch history repeating itself with the benefit of 
wisdom and hindsight. One of the most prominent memories | have of the 1960’s was the continual narrative 
that technology and advancements in engineering would bring untold benefits to society. While this indeed is 
very true in many ways and when looking back to the dull post-war years when society finally managed to 
climb out of the pit of depression and austerity, the reality did not meet the almost religious fervor with which 
politicians and social leaders beat this particular drum. 


While the mood music was very positive, | was blessed in the early 70’s when my parents moved to one of the 
first new towns developed in Scotland, East Kilbride. Established in 1949 by the 1947 Local Government 
(Scotland) Act, in part to address the poverty and poor housing conditions in the slums of Glasgow, East 
Kilbride was not only the blueprint for modernity from an architectural and design principle, but also from the 
high-tech and scientific industries that were encouraged to migrate to the area. The major motivation for this 
was not so much the demographic or that this gave employers a clean sheet upon which to build and expand, 
but the hidden benefits of government subsidy. The importance of the latter carrot was very much 
underestimated for within a few generations, by the time the caustic effects of recession, downsizing, cost 
cutting, outsourcing and globalization swept over the town, some of the most prominent early adopters had 
either gone bankrupt or migrated to different shores. 


The promises of what would come from a society where electricity was too cheap to meter, and that we would 
enter an era of more free time for the masses, once again rang hollow as the harsh realities of the employment 
market hit home. | could see the writing on the wall, and | too departed for the bright lights of London and the 
world. My peers, who had studied long and worked hard, were left devastated when the redundancy notices 
were handed out. While the plaintive cry of retraining was uttered, in reality, there was a stark choice — get on 
your bike and look for work outside the area, or go on the dole (national assistance). The bitter truth that 
technology offered a secure future from an employment perspective was shattered for many over those years. 
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This specter is now knocking at the door of the driver, the retailer, the government employee, the journalist, the 
accountant, the teacher and the lawyer. Even the hallowed confines of IT are being hollowed out as we return to 
centralized, automated cloud computing. Automation and efficiency ruthlessly march on, like they have done 
since the beginning of the industrial revolution. The difference this time around is we do not have a plethora of 
dark satanic mills nor cozy family farms or employers where the dispossessed can sell their intellect, muscle or 
creativity. The funeral director, the pawnbroker and the prostitute seem to be careers that may have a future, 
but even the latter, may be replaced by automated sex dolls with realistic flesh. The career pathway appears to 
be, you need to know more and more about less and less until you know everything about nothing. 


The 64 million dollar question is when is the tipping point going to be reached where the current model of full 
time employment breaks down? Rationally, and without any bias or bigotry, the social changes that have taken 
place since the Second World War have effectively doubled the number of employees available in the 
marketplace (albeit with grudging acceptance from some) — that being the emancipation of the housewife and 
mother. This alone, is not the problem. The economic reality is we have too many potential employees, and not 
enough jobs. And when you flood a market with a commodity, the value goes down. Hence the pincer 
movement on those that want to better themselves, or to put it another way, those that aspire to social mobility. 


A triend of mine that | chatted to recently, who works for one of the most high-tech companies in the world, 
totally out of the blue raised the point about a citizens wage. What | find so ironic about this is that Richard 
Nixon was on the verge of making that dream a reality in 1969. 1,200 economists backed that plan, including 
John Kenneth Galbraith. There are dangers of such an idea, and the worst, ethically, | can instantly imagine is 
the inherent subsidy that any employer will embrace, leading to a reduction in wages. We have seen the same 
mechanism at work in the UK with the introduction of a minimum wage in the UK, rather than being a safety 
net, employers have used this as a standard, leveraging the weight of the law to extract more value from the 
potential workforce. Salaries have reduced in real terms, yet employers expectations have increased when it 
comes to qualifications and experience. 


| like the idea though, with a few caveats. Firstly, any amount paid out to a family or individual must be pretty 
much unconditional. Unless you break the law, big time, you can receive it. Secondly, it must be a realistic 
amount dependent on where you live to have a reasonable quality of life. Otherwise, we end up with financial 
pogroms. Thirdly, employers need to understand this is not a subsidy. It is a much more important revelation. It 
is about relationship and value. 


Technology confronts humanity with a bare faced fact. Do you, as an individual, prefer the comfortable space 
where right and wrong are clearly delineated, or do you prefer some grey areas? Human advancement has 
taken us into worlds where, paradoxically, we can potentially erase ourselves from our own planet. What is 
coming down the turnpike will decide that. Economics is a very complex subject, the rioting less so. 
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FUNCTIONS: 


*® Cures Windows workstations and servers. 
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# Verifies the quality of the anti-virus software currently in use. 


FEATURES: 


s Dr.Web Curelt! doesn’t require installation and doesn’t conflict with any known anti-virus; conse 
quently there is no need to disable the anti-virus currently in use to check a system with Dr.Web Curelt!. 

s Improved self-protection and an enhanced mode for more efficient countermeasures against 
Windows bDiockers. 

s Dr.Web Curelt! ts updated at least once an hour. 


s The utility can be launched from removable media including USB storage devices. 


LICENSING FEATURES: 
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